generating a secret key (p, q, s, p) consisting of 
elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 {mod 4) , q = 3 (mod 4) , 
s e Z* gk 3 = 1 (mod pq) , 

- p e Z, ap = 1 (mod 1cm (p - 1, q - 1) ) , 

and 

generating a public key (n, g, h, k, 1, a ) consisting 

of elements n, g, h, k, 1, and a (k is the bit length of pq) 
where : 

- a. 9/ k/ 1 G Z (0 < g, h < n) , 

n = p d q (where d is an odd number) ; 

(b) an encryption step which the sender conducts by 
working the sender-end device, according to a procedure 
comprising : 

calculating the following equations with regard to a 
plaintext m (0 < m < 2 k " 2 ) and a random number r (0 <J r <; 1) : 

C = m 2Ct g r mod n, D = h r mod n 

calculating a Jacobi symbol a = (m/n) , 
composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, D, a) to said receiver; 

(c) a decryption step which said receiver conducts by 
working said receiver-end device according to a procedure 
comprising : 



calculating the following from the ciphertext (C, D, 
a) using said secrete key (p, q, s, p) where: 



m l p = (CI>*)* (P 4 +,) mod p, 
m\ t q — (CD*)**** ) mod q 

and 

finding one that fulfills conditions (x/n) = a and 0 < 
x < 2 k ~ 2 from among ^ (m L p , m 1 q ) , ^ <-m x p/ m x q ) , ^ (m x p , 

-m ) , (-m , , -m , ) and determining the one as the 

plaintext m (where ^ represents ring isomorphism mapping from 

Z/ (p) x Z (q) to Z/ (pq) according to Chinese remainder 
theorem) . 

3. (Amended) The public-key encryption method as 
recited in claim 2, further comprising: 

a step that said sender composes said plaintext m 
including check data for verifying the recovery of true 
information. 



7. (Amended) A public-key decryption method for 
decrypting a ciphertext encrypted in accordance with the 
method of claim 6, comprising the steps of: 

carrying out the decryption procedure in the public- 
key encryption method set forth in claim 2; 

verifying the validity of the calculation procedure by 



exclusive OR and data coherence executed as set forth in claim 
6 . 

8. (Amended) A public-key encryption method for data 
transmitted between a sender who encrypts data to send with a 
public key and a receiver who decrypts the data encrypted and 
delivered to the receiver with a secret key corresponding to 
said public key, said public-key encryption method comprising: 

(a) a key generation step which the receiver conducts 
by working the receiver-end device according to a procedure 
comprising : 

generating a secret key (p, q, p) consisting of 

elements p, q, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4) , 

- p e Zi ap = 1 (mod 1cm (p _ 1, q _ 1) ) , 
and 

generating a public key (n, k, a ) consisting of 
elements n, k, and a (k is the bit length of pq) , where: 

" CC' k G Zi 

n = p d q (where d is an odd number) ; 

(b) encryption which the sender conducts by working 
the sender-end device according to a procedure comprising: 

calculating the following equation with regard to a 
plaintext m (0 < m < 2 k2 ) where: 

m x = (m0 kl © G (r) ) | | (r © H (m0 kl © G(r))) (0 < m x < 2*- 2 ) (where 
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G: {0, l}* 0 _> {0, l} n , H: {0, l} n {0, l} k0 are suitable 

random functions, subject to k = n + k o +2), 

calculating a Jacobi symbol a = (myn) and the 
following equation : 

C = mod n , 

composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, a) to said receiver, 

(c) a decryption step which said receiver conducts by 

working said receiver-end device according to a procedure 

comprising : 

calculating the following from the ciphertext (C, a) , 
using said secrete key (p, q, p) where: 



mi, p = C * mod p, 

mi i9 = C * mod? 

finding x that fulfills conditions (x/n) = a and 0 < x 

< 2*-* from among ^ (m x p , m 1 q ) , $ ( -m x p , m x q ) , ^ (m x p , -m 
x q ) / ^ (~ni x p/ ~ m x q ) an d determining the x as m' x (where ^ 

represents ring isomorphism mapping from Z/ (p) x 2 (q) to 

2/ (pc[) according to Chinese remainder theorem) , and 

calculating the following, assuming m' = s' | |t' (where 
s' is upper n bits of m' and t' is lower k Q bits thereof) : 




Is 



© G(t* © H(8 f ))) n ~ k > if [s 9 © G(t' © H{s 9 ))] hl = 0** 

otherwise 

(where [a] n and [a] n represent upper n bits and lower n bits of 
the a, respectively. An asterisk (*) as the result of 
decryption denotes that decryption is unsuccessful) , thereby 
obtaining the result of decryption. 



9. (Amended) A public-key encryption method for 
data transmitted between a sender who encrypts data to send 
with a public key and a receiver who decrypts the data 
encrypted and delivered to the receiver with a secret key 
corresponding to said public key, said public-key encryption 
method comprising : 

(a) a key generation step which the receiver conducts 
by working the receiver-end device, according to a procedure 
comprising : 

generating a secret key (p, q, s, p) consisting of 

elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4) , 

s G Z/ gh 3 = 1 (mod pq) , 

- p e Z/ ap - 1 (mod 1cm (p _ 1, q _ 1) ) , 
and 

generating a public key (n, g, h, k, 1, a ) consisting 

of elements n, g, h, k, 1, and a (k is the bit length of pq) 
where : 
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- a/ 9/ k, 1 G z (0 < g, h < n) , 

n = p d q (where d is an odd number) ; 

(b) encryption which the sender conducts by working 
the sender-end device, according to a procedure comprising: 

calculating the following equation with regard to a 

plaintext m (0 < m < 2 k_1 ) and a random number r' (0 ^ r' ^ 
1) : 

m x = (m0 kl © G (r) ) | | (r © H (m0 kl © G(r))) (0 < m x < 2 k " 2 ) 

(where G: {0, l} k0 {0, l} n , H: {0, l} n _> {0, l} k0 are 

suitable random functions, subject to k = n + k +2), 

calculating a Jacobi symbol a = (m i /n) and the 
following equations: 

C = m l aa g r ' mod n, D = h r ' mod n, 

Composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, D, a) to said receiver; 

(c) decryption which said receiver conducts by working 
said receiver- end device, according to a procedure comprising: 

calculating the following from the ciphertext (C, D, 

a) , using said secrete key (p, q, s, p) where: 

C = m i 2(X g r ' mod n, D = h r ' mod n, 

finding x that fulfills conditions (x/n) = a and 0 < x 
< 2 k ~ 2 from among ^ (m x p , m x q ) , 0 (-m x p , m 1 q ) , ^ (m x p/ -m 

x q ) , ^ (-m 1 , -m x ) and determining the x as m' x (where ^ 

represents ring isomorphism mapping from Z/ (p) x Z (q) to Z/ 



(pq) according to Chinese remainder theorem) , and 

calculating the following, assuming m' = s' | |t' (where 
s' is upper n bits of m' x and t' is lower k Q bits thereof) : 




0 G{t' © H(s'))] n - k > if [s f ® G{t f ® H{3'))] kl = 0*' 

otherwise 

(where [a] n and [a] represent upper n bits and lower n bits of 
the a, respectively. An asterisk (*) as the result of 
decryption denotes that decryption is unsuccessful) , thereby 
obtaining the result of decryption. 



10, (Amended) A public-key encryption method fqr 
data transmitted between a sender who encrypts data to send 
with a public key and a receiver who decrypts the data 
encrypted and delivered to the receiver with a secret key 
corresponding to said public key, said public-key encryption 
method comprising: 

(a) a key generation step which the receiver conducts 
by working the receiver-end device, according to a procedure 
comprising : 

generating a secret key (p, q, s, p) consisting of 
elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4) ; 
s <= Z» gk 3 = 1 (mod pq) , 

p e Z# ccp = 1 (mod 1cm (p _ 1, q _ 1) ) , 
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and 

generating a public key (n, g, h, k, 1, a ) consisting 

of elements n, g, h, k, 1, and a (k is the bit length of pq) 
where : 

- a# 9# h, k, 1 e Z (0 < g, h < n) , 
n = p d q (where d is an odd number) , 

(b) encryption which the sender conducts by working 
the sender-end device, according to a procedure comprising: 

calculating, the following equation with regard to a 
plaintext m (0 < m < 2 n ) : 

m x = (m © G (r) ) | | (r © H (m © G(r) ) ) (0 < tr^ < 2 k ~ 2 ) 

(where G: {0, l} k0 _> {0, l} n , H: {0, l} n {0, l} k0 are 

suitable random functions, subject to k = n + k Q +2), 

calculating a Jacobi symbol a = (m i /n) and the 
following equations : 

C = m^" g p t ml > mod n, D = h p < ml > mod n 

(where F: {0, + _^ {o, l} 1 is a suitable random function), 

composing a ciphertext (C,D,a) from the obtained C,D 
and a , and 

sending the ciphertext (C, D, a) to said receiver; 

(c) decryption which said receiver conducts by working 
said receiver-end device, according to a procedure comprising: 

calculating the following from the ciphertext (C, D, 

a), using said secrete key (p, q, s, p) where: 



mttP = (CD*)^modp, 
= (CD 9 )* 3 ? 11 mod g 

finding x that fulfills conditions (x/n) = a and 0 < x 

< 2 k - 2 from among ^ (m x p/ m i q ) , ^ (-m x p , m x q ) , ^ (m x p/ -m 
x q ) , ^ (" m i p f _m x q ) and determining the x as m' x (where ^ 

represents ring isomorphism mapping from Z/ (p) x Z (q) to Z/ 

(pq) according to Chinese remainder theorem) , and 

calculating the following, assuming m' = s' | |t' (where 
s' is upper n bits of m' and t' is lower k bits thereof) : 

1 0 

otherwise 

(where, C and D' are obtained by: 
C = m' l 2a g F(ml, mod n, D' = h F < m l) mod n 

and [a] n and [a] n represent upper n bits and lower n bits of 
the a, respectively, wherein asterisk (*) as the result of 
decryption denotes that decryption is unsuccessful) , 

thereby obtaining the result of decryption. 




12. (Amended) A public-key encryption method for 
data transmitted between a sender who encrypts data to send 
with a public key and a receiver who decrypts the data 
encrypted and delivered to the receiver with a secret key 
corresponding to said public key, said public-key encryption 
method comprising: 

(a) a key generation step which the receiver conducts 



by working the receiver-end device, according to a procedure 
comprising : 

generating a secret key (p, q, s, p) consisting of 
elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q == 3 (mod 4) # 
s e Z/ gh 3 s 1 (mod pq) , 

- p e z* otp s 1 (mod 1cm (p - 1, q _ 1) ) , 

and 

generating a public key (n, g, h, k, 1, a ) consisting 

of elements n, g, h, k, 1, and a (k is the bit length of pq) 
where : 

- a/ 9/ h, k, 1 € Z (0 < g, h < n) , 

n = p d q (where d is an odd number) ; 

(b) encryption which the sender conducts by working 
the sender-end device, according to a procedure comprising: 

selecting a random number r (0 < r <2 k0 ) with regard to 
a plaintext m (0 < m < 2 n ) , 

calculating the following: 

m x = m | 

(where F: {o, i} n+k0 _^ {o, l} 1 is a suitable random function, 



subject to k = n + k Q +2), 

calculating a Jacobi symbol a = (m i /n) and the 
following equations : 

C = m i 20t g p(ml) mod n, D = h Pt^nl, mod n, 

Composing a ciphertext (C,D,a) from the obtained C,D 
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and a, and 

sending the ciphertext (C, D , a) to said receiver; 
(c) decryption which said receiver conducts by working 
said receiver-end device, according to a procedure comprising: 

calculating the following from the ciphertext (C, D, 

a), using said secrete key (p, q, s, p) : 

mi, p = {CD 9 ) iS ^ L mod p, 

6(0+11 

mi (ff = * mod q 

finding x that fulfills conditions (x/n) = a and 0 < x 

< 2 k ~ 2 from among ^ (m ^ p , m 1 q ) , ^ (-m x p/ m x q ) , ^ (m x p , -m 
x q ) , ^ (-m 1 , -m x ? ) and determining the x as m' x (where ^ 

represents ring isomorphism mapping from Z/ (p) x 2 (q) to Z/ 

(pq) according to Chinese remainder theorem) , and 
calculating the following: 

) 

m 



I * otherwise 
(where, O and D' are obtained by 



C = m' x 2a g p i"'u mod n, D' = h^"' 1 * mod n 

and [a] n and [a] represent upper n bits and lower n bits of 
the a, respectively, wherein asterisk (*) as the result of 
decryption denotes that decryption is unsuccessful) , thereby 
obtaining the result of decryption. 
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